Lead - Business Controls Testing

About your team

The Controls Assurance and Operational Resilience team is part of the Non-Financial Risk & Enterprise Resilience function, a centralized global team responsible for providing independent assurance over controls and risk across business and technology functions.

The team works closely with internal stakeholders, internal audit, and external regulators, ensuring that controls are designed, implemented, and operating effectively. The scope includes:

• Supporting enterprise resilience capabilities through structured testing of business controls associated with Critical and Important Business Services (CIBS), and Critical and Important Functional Services (CIFS)
• Providing governance and independent assurance over control design, implementation, and ongoing effectiveness
• Ensuring control testing results are reported accurately and in a timely manner to management through regular reporting and a final report, and recorded in the system of record (ServiceNow IRM)
• Ensuring testing coverage in accordance with the plan, while also evaluating which processes need testing due to changing risk exposure

About your role

As a Specialist/ Lead in the Business controls testing team, you will serve as an execution lead, driving the design, delivery, and scale-up of control assurance and resilience testing across business processes attached to CIBS and CIFS.

The role covers end-to-end testing across key areas covering a variety of domains relevant to the process (Operational), based on risk exposure and relevance to critical services. You will be accountable for ensuring testing is risk-led, consistently executed, and aligned to evolving regulatory expectations.

You will play a central role in embedding audit-ready, regulator-defensible practices by standardizing testing methodologies, strengthening evidence quality, and improving the consistency and transparency of reporting. In parallel, you will support the evolution of resilience testing capabilities to meet requirements under frameworks such as DORA and FCA operational resilience.

This role combines hands-on execution with ownership of the testing lifecycle, uplift of data quality, and driving automation to improve the efficiency and scalability of the assurance model.

Working across first-, second-, and third-line functions, you will challenge control design, resolve evidence and data gaps, and actively support audit and regulatory engagement.

About you

Your key accountabilities in this role would be:

Controls Testing Execution

• Planning, business coordination, testing execution, and regular reporting to business about any known exceptions.
• Assist in validating control effectiveness in disruption scenarios, including coordination across business teams
• Support documentation and reporting of testing outcomes and identified gaps
• Define and enforce standards for control descriptions, mappings, and evidence sufficiency to ensure audit- and regulator-defensible outcomes
• Support risk-based prioritisation of control coverage, identifying gaps and driving remediation actions

Skills and experience:

• Hands-on testing experience of 8-10 years in business controls testing, assurance, or compliance within enterprise or regulated environments
• Strong hands-on experience with ServiceNow IRM or equivalent GRC tooling, including control frameworks, data management, and reporting
• Understanding of control testing methodologies and assurance practices, including evidence evaluation and issue management
• Exposure to regulatory frameworks and resilience concepts (e.g., operational resilience, and DORA)
• Experience in assurance reporting
• Ability to work with and influence stakeholders across business and technology teams
• Strong analytical capability with attention to detail and focus on data quality and consistency
• Good written and verbal communication skills, with the ability to explain control and compliance concepts clearly
• Relevant certifications (e.g., CIA, CPA, or CRISC) preferred